build(deps): bump mongoose from 8.20.3 to 9.0.2

[dependabot]

Bumps mongoose from 8.20.3 to 9.0.2.

Release notes

Sourced from mongoose's releases.

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #15815 #15814 JavaScriptBach
• docs: improve colors on dark mode #15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #15890

9.0.1 / 2025-12-05

• perf: use native Buffer.equals() for buffer comparison #15821 AbdelrahmanHafez
• fix(model): fix overwriteImmutable not working with timestamps: true, add overwriteImmutable types re #15781 #15819 AbdelrahmanHafez
• fix(bulkWrite): pass overwriteImmutable option to castUpdate fixes #15782 #15781 jhaayushkumar
• fix(schema): Add enumValues property to Number enum for consistency with String enum #15824 AkaHarshit
• fix: incorrect variable bug in double casting #15849 #15848 lomesh2312
• fix: clear timeout in collection operations #15852 techcodie
• types(query+model): use function overrides instead of | Query<any, any> to support using Query as filter #15791 #15779
• docs(migrating_to_9): clarify removing next() from pre middleware #15813
• docs: add dark mode support and CSS improvements #15753
• docs: Mongoose compatibility page updates #15797 alexbevi
• docs: Add closing backticks to code block in migration guide #15783 isnifer
• docs: fix documentation link in connection.js #15804 salittle0

9.0.0 / 2025-11-21

• BREAKING CHANGE: drop support for callback-based pre middleware, e.g. next() in pre() hooks
• BREAKING CHANGE: update to MongoDB Node driver v7
• BREAKING CHANGE: make UUID schema type return bson UUIDs #15378
• BREAKING CHANGE: make findOne(null), find(null), etc. throw an error instead of returning first doc #15019 #14948
• BREAKING CHANGE: disallow update pipelines by default, require updatePipeline option #15586 #14424
• BREAKING CHANGE: call virtual ref function with subdoc, not top-level doc #14652 #12440 #12363
• BREAKING CHANGE(types): make create() and insertOne() params more strict, remove generics to prevent type inference #15587 #15355
• BREAKING CHANGE(types): make FilterQuery properties no longer resolve to any in TypeScript #15422
• BREAKING CHANGE(types): change this to HydratedDocument for default() and required(), HydratedDocument | Query for validate() #15020 #14696
• BREAKING CHANGE(types): make id a virtual in TypeScript rather than a property on Document base class #15572 #13079
• BREAKING CHANGE(types): consolidate RootQuerySelector, Condition, etc. types with MongoDB driver's #15593
• BREAKING CHANGE: asyncify update validators, SchemaType.prototype.doValidate(), save hooks for improved stack traces #15312
• BREAKING CHANGE: remove bson as direct dependency, use mongodb/lib/bson instead #15576 #15154
• BREAKING CHANGE: remove _executionStack, make validate() async function and call Kareem hooks directly vs through wrappers #15298 #14906
• BREAKING CHANGE: remove browser build, move to @​mongoosejs/browser instead #15385 #15296
• BREAKING CHANGE: remove schematype caster and casterConstructor properties in favor of embeddedSchemaType and Constructor #15513 #15179
• BREAKING CHANGE: adding missing pluralizations, fixing pluralization: virus -> viruses #14247 ItsBradyDavis
• BREAKING CHANGE: remove connection noListener option #15641 #15640
• feat(types): add Schema.create() for TypeScript type inference #15482 #14954
• chore: remove examples directory #15597

... (truncated)

Changelog

Sourced from mongoose's changelog.

9.0.2 / 2025-12-17

• fix(model): trigger error post hook on bulkwrite when pre-hook throws an error #15882 AbdelrahmanHafez
• fix(document): use bitwise OR to accumulate version mode flags #15893 AbdelrahmanHafez
• types(queries): apply Mongoose casting to default MongoDB driver _id in RootFilterOperators #15891 #15887 #15779
• types(schema): correctly infer virtuals, methods on hydrated doc type from schema options #15892
• types: fixed this parameter type detection for methods with arguments #15885 I-Enderlord-I
• types: export InferRawDocTypeWithout_id to replicate Mongoose 8 InferRawDocType behavior #15815 #15814 JavaScriptBach
• docs: improve colors on dark mode #15879 AbdelrahmanHafez
• docs(model): add overwriteImmutable option #15884 AbdelrahmanHafez
• refactor: remove internal callbacks for buffering #15890

Commits

• 47ab068 chore: release 9.0.2
• 7a2203e fix(document): use bitwise OR to accumulate version mode flags (#15893)
• 8b018aa Merge pull request #15892 from Automattic/vkarpov15/gh-15869
• 7d354a6 Merge branch 'master' into vkarpov15/gh-15869
• 8534957 Merge pull request #15885 from I-Enderlord-I/patch-1
• bc5873b Merge pull request #15891 from Automattic/vkarpov15/gh-15779-2
• 06b83cb Merge pull request #15815 from JavaScriptBach/inferpojotype
• 4607fe0 Replace InferPojoType with InferRawDocTypeWithout_id
• df6faab Add InferRawDocTypeWithout_id type definition
• 20bb91c Merge branch '8.x'
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
mongoose	[< 8.3, > 8.2.2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #2450.